Installing an 11g SOA Cluster – Part IV More Configuration

Configuring a SOA 11g PS2 SOA Cluster – Part IV SOA Configuration

image In this post we will continue to set up our SOA cluster.  Previously I covered setting up the environment with a Web Services Manager Policy Manager Cluster.  We will now extend the domain created there to include SOA and BPM components as shown in the diagram above.

Extend the WebLogic Domain to Support SOA

We will extend the domain to support SOA/BPM managed servers in a cluster. (EDG)

Enable SOA Managed Server IP Addresses

Because the SOA managed servers will later be configured to run on any machine through whole server migration we need to bind their IP addresses to some physical machines because we have not set up the automatic migration of IP addresses.  We do this by running the ifconfig and arping commands as shown below for each SOA server we will create on the physical machine we first want to run it on.  In the example below I use sub-adapter 8 on both machines for consistency and to avoid sub-adapter 9 which we used for the admin server.  10.0.3.111 and 10.0.3.112 are the IP addresses for soa1 and soa2.

sudo /sbin/ifconfig eth1:8 10.0.3.111 netmask 255.255.255.0
sudo /sbin/arping -q -U -c 3 -I eth1 10.0.3.111

Check that you can ping SOA server soa1 from the server 2 and SOA server soa2 from server 1. (EDG)

Run the Config Wizard to Extend the Domain.

Because we have an existing domain we will extend it to support the SOA and BPM components.

Running Config Script and Selecting Templates

From the Oracle common home $MW_HOME/oracle_common run the config wizard at common/bin/config.sh. and select “Extend an existing WebLogic domain”.  Select the WebLogic domain which is in the aserver (/u01/app/oracle/admin/soa-domain/aserver/soa_domain) directory.  When requested make sure you have the following checked then proceed:

  • Oracle BPM Suite
  • Oracle SOA Suite

If you do not need or are not licensed for BPM Suite then just select SOA Suite.

The following should be selected but grayed out:

  • Basic WebLogic Server Domain
  • Oracle Enterprise Manager
  • Oracle WSM Policy Manager
  • Oracle JRF

Configuring RAC Data Sources

We need to configure all the JDBC component schema as multi data source schemas.  Select the SOA Infrastructure, User Messaging Service and SOA MDS Schema and set the following:

  • Service Name : soaedg.soa.oracle.com (the service name we created in the database)
  • Password: <password> (assuming you set all schemas to the same password)
  • Host Names: rac1-vip.soa.oracle.com and rac2-vip.soa.oracle.com
  • Instance Names: RAC1 and RAC2
  • Port Numbers: 1521

If we selected a schema prefix of “DEV” then there is no need to set the individual schema names.  If you chose a different prefix then you need to select each schema individually and change the username.

This will set the schemas to use the RAC database and fail over between nodes if necessary.

Creating Distributed Queues

Because we are installing a cluster we need to customize the following sections:

  • JMS Distributed Destinations – to set up distributed queues
  • Managed Servers, Clusters, and Machines – to create our SOA managed servers and SOA cluster
  • Deployments and Services – to target our deployments at the correct cluster

In the Select JMS Distributed Destination Type screen we make sure that we are not using weighted distributed destinations but instead are using uniform distributed destinations (UDD) for all the JMS resources.

Created SOA/BPM Managed Servers and Cluster

SOA & BPM run in the same managed servers so In the Configure Managed Servers screen we change the name of new server to SOA1 from soa_server1 and add a second SOA server SOA2.  The SOA servers need to be listening on address soa1.soa.oracle.com or soa2.soa.oracle.com as appropriate.  This will restrict them to listening on the IP addresses that are configured to float between machines.  Both servers can be set to listen on port 8001.  Having all servers of the same kind listening on the same port makes it easier to see what is happening.

Server Name Listen Address Listen Port
SOA1 soa1.soa.oracle.com 8001
SOA2 soa2.soa.oracle.com 8001

On the Configure Clusters screen we can add a new cluster called SOA_Cluster and assign the two SOA servers to that cluster on the Assign Servers to Clusters screen.

Assign to Servers to Machines

On the Configure Machines screen delete the LocalMachine that has been created as we previously created the machines we need in the Unix tab when original creating the domain.

We then assign the new servers to physical machines SOAHost1 and SOAHost2 on the Assign Servers to Machines screen.

Targeting Deployments, Services and Resources to SOA/BPM Cluster

Finally we need to make the following changes to the deployments and services to make sure that they are correctly targeted.

Application Targets
WSM-PM WSM_Cluster
Libraries Targets
oracle.rules.* SOA_Cluster
oracle.sdp.* SOA_Cluster
oracle.bpm.* SOA_Cluster
oracle.soa.* SOA_Cluster
Startup Classes Targets
JOC-Startup WSM_Cluster
JOC-Shutdown WSM_Cluster
OWSM Startup class WSM_Cluster
JDBC Targets
mds-owsm WSM_Cluster, AdminServer
mds-owsm-rac0 WSM_Cluster, AdminServer
mds-owsm-rac1 WSM_Cluster, AdminServer

All other items are left as they are set up by the wizard.

The domain has now been extended to support SOA and BPM. (EDG)

Restart Admin Server

To get our changes to the domain to take effect we need to restart the admin server.  We are then ready to make some further config changes.

Configure Coherence for SOA Cluster

Coherence is Oracles data grid software and the higher levels of the Oracle stack are moving away from JGroups and Java Object Cache to use Coherence for both cluster membership decisions and distributed object caching.  A Coherence cluster has no master node, any machine can be the master.  There are two ways to locate a Coherence cluster, through a broadcast request (the default), or through well known addresses.  The table below compares the two approaches:

Feature Multi-Cast Uni-Cast
Configuration Same for all machines. Different setting for Coherence cluster localhost property for each machine.
Discovery Mechanism Multicast IP packets. Unicast IP packets to list of servers specified in config (well known addresses or wka).
Startup Order No order required. At least one of the servers in the wka list must be the first to start
Impact of Adding Servers No Impact Ideally should update config of all servers to add a new wka to their lists.
Impact of Routers Between Servers Unless configured will drop multi-cast packets. No impact.
Impact of Multiple Coherence Clusters on Network Need to configure each cluster with a unique multicast address. As long as wka’s are separate for each cluster then no impact.

When using well known addresses Coherence will go through the list of WKAs in an attempt to find an existing cluster.  If it does not find a server then it will start a cluster only if its localhost setting is the same as one of the wka’s, otherwise it will give up on the cluster!  When using multi-cast then Coherence will broadcast a message saying in effect, is there a cluster out there, and if it gets a response then it will join that cluster, otherwise it will create a cluster.  Once a cluster is joined then the two models behave in the same way.

Because of the problems with putting multi-cast messages through routers the EDG recommends using well known addresses.  The impact of adding additional servers can be mitigated by creating hostnames for additional SOA servers ahead of time and adding them to the list of wka’s in each server.  If a server is unable to find any well known addresses and it is not configured to listen on one of the well known addresses then the server will not start. (Coherence Wiki)

If you decide to use multi-cast because you are not going through a router then I recommend that you configure a unique cluster address different from the default cluster of “227.7.7.9:9778” by changing the coherence.clusteraddress and coherence.clusterport settings.  Valid values for the cluster address are 224.0.0.0 to 239.255.255.255 and for the cluster port are 1 to 65535.  (Coherence Wiki)

To change the multi-case settings we change the EXTRA_JAVA_PROPERTIES in setDomainEnv.sh.

EXTRA_JAVA_PROPERTIES="${EXTRA_JAVA_PROPERTIES}
  -Dsoa.archives.dir=${SOA_ORACLE_HOME}/soa -Dsoa.oracle.home=${SOA_ORACLE_HOME}
  -Dsoa.instance.home=${DOMAIN_HOME} -Dtangosol.coherence.clusteraddress=225.99.88.77
  -Dtangosol.coherence.clusterport=2010 -Dtangosol.coherence.log=jdk
  -Djavax.xml.soap.MessageFactory=oracle.j2ee.ws.saaj.soap.MessageFactoryImpl
  -Djava.protocol.handler.pkgs=${PROTOCOL_HANDLERS}
  -Dweblogic.transaction.blocking.commit=true -Dweblogic.transaction.blocking.rollback=true
  -Djavax.net.ssl.trustStore=${WL_HOME}/server/lib/DemoTrust.jks"
export EXTRA_JAVA_PROPERTIES

Note if you change the multcast settings it needs to be done for each set of domain files, see note later on using pack and unpack.

To apply the Coherence WKA configuration we need to edit the startup command arguments for each SOA managed server in the WebLogic console (managed server->Configuration->ServerStart tab Arguments field)and setting it as follows:

Managed Server WKA Config
SOA1 -Dtangosol.coherence.wka1=soa1 –Dtangosol.coherence.wka2=soa2 –Dtangosol.coherence.wka3=soa3 –Dtangosol.coherence.localhost=soa1
SOA2 -Dtangosol.coherence.wka1=soa1 –Dtangosol.coherence.wka2=soa2 –Dtangosol.coherence.wka3=soa3 –Dtangosol.coherence.localhost=soa2

Note that the multicast config is simpler but will probably not work across routers.  Also notice that I have added a dummy third server to the list of WKAs so that if I decide to add a third server to my cluster I don’t need to do anything to the existing two servers and can start the servers in any sequence.  Finally make sure that there are no newlines in the Arguments box! (EDG)

Configure B2B Queues

Because of the way B2B uses queues and topics it is necessary to create specific destination identifiers as outlined below:

Queue Create Destination Identifier
dist_B2BEventQueue_auto jms/b2b/B2BEventQueue
B2B_IN_QUEUE jms/b2b/B2B_IN_QUEUE
B2B_OUT_QUEUE jms/b2b/B2B_OUT_QUEUE
B2BBroadcastTopic jms/b2b/B2BBroadcastTopic
XmlSchemaChangeNotificationTopic jms/fabric/XmlSchemaChangeNotificationTopic

 

Disable Hostname Verification

We need to disable hostname verification for the SOA1 and SOA2 servers as we previously did for the AdminServer and the WSM1 and WSM2 servers.

Transfer Changes to Managed Domains

We need to make sure that the managed domains have the latest changes by using the pack command to bundle up a new domain template from the oracle_common/common/bin directory, as before we use the aserver shared directory to move the domain template:

./pack.sh -managed=true
-domain=$ORACLE_BASE/admin/soa-domain/aserver/soa_domain
-template=$ORACLE_BASE/admin/soa-domain/aserver/soadomaintemplateExtSOABPM.jar
-template_name=soa_domain_templateExtSOABPM

We then run the unpack command on each host to unpack the propagated template to the domain directory of the managed server:


./unpack.sh -domain=$ORACLE_BASE/admin/soa-domain/mserver/soa_domain
-overwrite_domain=true
-template=$ORACLE_BASE/admin/soa-domain/aserver/soadomaintemplateExtSOABPM.jar
-app_dir=$ORACLE_BASE/admin/soa-domain/mserver/applications

If there are problems starting servers in the managed domain then you may need to delete the mserver/soa_domain directory and run unpack again. (EDG and EDG)

Important: If You Changed setDomainEnv.sh

If you changed the Coherence clusteraddress and clusterport in setDomainEnv.sh then you need to make the same changes on every machines managed domain where you ran unpack as changes to setDomainEnv.sh are not propagated through the pack/unpack command.

Unpacking XEngine Files

For each additional copy of the SOA binaries that you have (one on each machine if you are not using shared binaries) you will need to unpack the B2B XEngine files.  These files are unpacked for you on the machine that you ran the domain configuration wizard.


cd /u01/app/oracle/product/fmw/Oracle_SOA/soa/thirdparty/edifecs
tar -xzvf XEngine.tar.gz

Note that if you have shared binaries then you only need to do this for the shared binaries that were not mounted on the machine that ran the domain configuration wizard. (EDG)

Testing the Install

At this point I would recommend shutting down all servers and node managers and then bringing up the node managers, the Admin Server and then using the admin server to start the WSM_Cluster servers followed by the SOA_Cluster servers.  If there are problems in starting then check that you have correctly targeted all the SOA components and that the Coherence cluster in SOA managed servers does not show any errors.

You can then validate that you can access the following URLs


  • Web Services Manager Policy Manager

    • http://wsm1:7010/wsm-pm, http://wsm1:7010/wsm-pm
    • Click Validate Policy Manager. A list of policies and assertion templates available in the data store appear.

  • SOA infrastructure

    • http://soa1:8001/soa-infra, http://soa2:8001/soa-infra

  • SOA Process Composer

    • http://soa1:8001/soa/composer, http://soa2:8001/soa/composer

  • Worklist Application

    • http://soa1:8001/integration/worklistapp, http://soa2:8001/integration/worklistapp

  • B2B

    • http://soa1:8001/b2bconsole, http://soa1:8001/b2bconsole

  • Messaging System Preferences

    • http://soa1:8001/sdpmessaging/userprefs-ui, http://soa2:8001/sdpmessaging/userprefs-ui

  • BPM Composer

    • http://soa1:8001/bpm/composer, http://soa2:8001/bpm/composer

  • BPM Workspace

    • http://soa1:8001/bpm/workspace, http://soa2:8001/bpm/workspace


Note weblogic/<password> will let you login to all these URLs.  If you can get to all these components then you are well on your way to a working SOA cluster.  Note the EDG WSM URL is wrong.  (EDG and EDG)

Configuring and Validating HTTP Servers for SOA

I amended my httpd.conf configuration as shown below to add routing to the SOA and BPM Suite.  Obviously if you did not deploy BPM Suite you do not need the bpm mappings.


<IfModule mod_weblogic.c>

# WSM-PM


  MatchExpression /wsm-pm WebLogicCluster=wsm1:7010,wsm2:7010


# SOA soa-infra app


  MatchExpression /soa-infra WebLogicCluster=soa1:8001,soa2:8001


# Worklist


  MatchExpression /integration WebLogicCluster=soa1:8001,soa2:8001


# B2B


  MatchExpression /b2bconsole WebLogicCluster=soa1:8001,soa2:8001


# UMS prefs


  MatchExpression /sdpmessaging/userprefs-ui WebLogicCluster=soa1:8001,soa2:8001


# Default to-do taskflow


  MatchExpression /DefaultToDoTaskFlow WebLogicCluster=soa1:8001,soa2:8001


# Workflow


  MatchExpression /workflow WebLogicCluster=soa1:8001,soa2:8001


#Required if attachments are added for workflow tasks


   MatchExpression /ADFAttachmentHelper WebLogicCluster=soa1:8001,soa2:8001


# SOA composer application


   MatchExpression /soa/composer WebLogicCluster=soa1:8001,soa2:8001


# BPM


  MatchExpression /bpm/composer WebLogicCluster=soa1:8001,soa2:8001


# BPM


  MatchExpression /bpm/workspace WebLogicCluster=soa1:8001,soa2:8001


</IfModule>


Note I used MatchExpression rather than Location because I had problems with location when using virtual hosts.  In my configuration I use virtual hosts to restrict access to the WebLogic console and EM.  These changes need to be made to all OHS instances in /u01/app/oracle/admin/OHSN/config/OHS/ohsN/httpd.conf.   We then use opmnctl restartproc to restart the HTTP servers.


/u01/app/oracle/admin/OHS1/bin/opmnctl restartproc ias-component=ohs1

/u01/app/oracle/admin/OHS2/bin/opmnctl restartproc ias-component=ohs2


We should now have access to our SOA services through the HTTP server and load balancer.  (EDG)

We can then check the following URLs to ensure that the web servers and load balancer are working


  • WSM Policy Manager

    • http://web1:7777/wsm-pm, http://web22:7777/wsm-pm, https://soa-cluster.soa.oracle.com/wsm-pm

  • SOA Infrastructure

    • http://web1:7777/soa-infra, http://web2:7777/soa-infra, https://soa-cluster.soa.oracle.com/soa-infra

  • SOA Composer

    • http://web1:7777/soa/composer, http://web2:7777/soa/composer, https://soa-cluster.soa.oracle.com/soa/composer

  • Worklist Application

    • http://web1:7777/integration/worklistapp, http://web2:7777/integration/worklistapp, https://soa-cluster.soa.oracle.com/integration/worklistapp

  • Messaging System Preferences

    • http://web1:7777/sdpmessaging/userprefs-ui, http://web2:7777/sdpmessaging/userprefs-ui, https://soa-cluster.soa.oracle.com/sdpmessaging/userprefs-ui

  • B2B

    • http://web1:7777/b2bconsole, http://web2:7777/b2bconsole, https://soa-cluster.soa.oracle.com/b2bconsole

  • BPM Composer

    • http://web1:7777/bpm/composer, http://web2:7777/bpm/composer, https://soa-cluster.soa.oracle.com/bpm/composer

  • BPM Workspace

    • http://web1:7777/bpm/workspace, http://web2:7777/bpm/workspace, https://soa-cluster.soa.oracle.com/bpm/workspace


If all the above URLs work then our web servers and load balancer are configured correctly. (EDG)

Setting SOA/BPM Frontend Host & Cluster Address

We need to make the SOA cluster aware of how it is being accessed.  We do this by selecting the SOA cluster from the Clusters summary in WebLogic console and selecting the HTTP tab and setting the frontend host to be soa-cluster.soa.oracle.com and frontend HTTPS port to be 443.

This also effectively sets the callback URL for SOA so that it will correctly generate callback addresses for the cluster rather than the individual node that is generating the reference. (EDG)

To take advantage of the cluster for direct binding (RMI rather than SOAP over HTTP) then we need to set the cluster address to the list of machines in the cluster.  This is set from the SOA cluster General tab in WebLogic console.  We need to set the Cluster Address field to be a comma separated list of the managed servers in our SOA/BPM cluster.


soa1:8001, soa2:8001


This will enable the SOA Suite to take advantage of the cluster when using optimized message calls. (EDG)

Important Note When Using Self-Certified Certificates

If you are using SSL for your front-end host (as recommended by the EDG) and are not using publicly certified certificates then you need to import the certificate from your load balancer into your Java cacerts file otherwise you will not be able to test your processes and some components that make loopback calls may fail because they cannot verify the host.  To import the certificate first export it from the load balancer using your browser then take the saved file and add it using keytool


<JAVA_HOME>/bin/keytool –importcert –file DownLoadedCert

                                                 –keystore <JAVA_HOME>/jre/lib/security/cacerts –alias soa-cluster


This adds the certificate as a trusted certificate to the trust store and identifies it with the name soa-cluster.

Setting Message Stores for Failover

The SOA infrastructure uses JMS queues and because these are set up as uniform distributed queues they need to be made available on shared storage for server failover.  Distributed queues allow part of each queue to be managed by individual managed servers.  If a managed server fails then any messages in its portion of the queue will get stuck until the server is restarted.  So that we can restart the server on a different node, to cope with hardware failure, we need to put the associated queue files onto shared storage.

We change all the stores from the WebLogic Console by going to the Services->Persisence Stores page and then for each store we go in and selec the configuration tab and change the Directory field to be /u01/app/oracle/admin/soa-domain/soa-cluster/jms, which is the shared directory we set up.  Each managed server will then create a unique file in that directory to store its messages. (EDG)

Setting a Shared Transaction Store

The SOA Infrastructure makes use of XA transactions and so uses the WebLogic transaction coordinator.  In the event of a managed server failing the in-flight transactions are persisted in a file.  This file must be accessible from all nodes so that in event of machine failure a managed server can be restarted and still be able to find its in-flight transactions, it can then either roll them forward or back as appropriate.  Leaving in-flight transactions active can cause problems for resource managers such as a database, which may maintain locks.

To place the transaction logs in a shared location for each of the SOA managed servers go to the Configuration->Services tab and set the Default Store to be a shared location such /u01/app/oracle/admin/soa-domain/soa-cluster/tlogs which is in our shared cluster directory.  Each managed server will then store its transaction logs here and will be able to find them in the event of being started on a different node. (EDG)

Configuring File & FTP Adapters for HA

The file and FTP adapters are not dealing with transactional resources and so to avoid race conditions the adapters can be configured to communicate through locks in the database and through a shared file structure.  The FTP config for HA is basically the same as file adapter config, except you will do additional configuration of the FTP adapter for each specific FTP server.  To configure the adapters to use the DB for HA coordination go to the FileAdapter or FTPAdapter under Deployments and choose the Configuration->Outbound Pools tab.  Expand the ConnectoinFactory entry and for the FileAdapter select the eis/HAFileAdapter outbound connection properties.  The data sources are already set up to point to the SOA repository.  You just need to change the controlDir to point to a shared location available to all servers, such as /u01/app/oracle/admin/soa-domain/soa-cluster/fadapter.

After saving your changes you will prompted for a plan location.  The plan needs to be available to all managed servers and so set the plan location to be /u01/app/oracle/admin/soa-domain/soa-cluster/dd/fadapter/Plan.xml. (EDG)

Important Note

Anytime that you create a plan file you need to store it in shared storage that is accessible from all nodes because it does not get propagated with the rest of the WebLogic configuration.

Summary

We have now done basic configuration of our SOA cluster for HA, but we have not yet enabled it for automatic server failover between nodes and we have not yet added the BAM components to our cluster.  We will perform these activities in the next couple of blog entries.

Comments:

Hi Anthony, I am busy setting up a SOA Suite 11.1.1.5 cluster on our Exalogic and I find your "Musings" very helpful, and very welcome supplement to the umbersome EDG. Thanks for all the work you have put in!
I have however a comment/question regarding the B2B Queues. What is the reasoning that the Identifier for the B2B_OUT_QUEUE is created as jms/b2b/B2B_IN_QUEUE and vice versa? This is puzzeling to me. Should it not be "OUT" together with "OUT" and "IN" together with in ?

Posted by guest on December 29, 2011 at 04:03 AM MST #

You are quite right, they should be the other way round, as in the documentation : http://docs.oracle.com/cd/E21764_01/core.1111/e12036/extend_soa.htm#BGBJAJJH

I will correct the entry.

Posted by Antony on December 29, 2011 at 03:47 PM MST #

Post a Comment:
Comments are closed for this entry.
About

Musings on Fusion Middleware and SOA Picture of Antony Antony works with customers across the US and Canada in implementing SOA and other Fusion Middleware solutions. Antony is the co-author of the SOA Suite 11g Developers Cookbook, the SOA Suite 11g Developers Guide and the SOA Suite Developers Guide.

Search

Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today